Trust
Security and data processing
OfficeMaker is operated by AI Build Group Ltd. This page summarises how the service handles data, using only facts already stated in the Privacy Policy or visible in the production platform. It does not claim certifications that have not been published.
Who is responsible
AI Build Group Ltd (company number 17151645) is the data controller for personal data processed through the OfficeMaker website and service, as described in the Privacy Policy. Address and contact details are on the Contact and Privacy pages.
What data is processed
- Account and identity data from sign-in (Amazon Cognito), such as name, email and organisation when provided
- Usage and technical data such as IP address, device or browser type, and logs
- Content you submit: prompts, uploads, document-related data and generated outputs
- Limited billing metadata when you purchase paid features; card numbers are handled by payment providers
Hosting and transport
The production website and APIs are hosted on Amazon Web Services. The site is served over HTTPS. Amplify Hosting sends Strict-Transport-Security with includeSubDomains. Authentication uses Amazon Cognito. Organisation files can be stored on organisation-scoped S3 where document management is enabled.
Subprocessors (categories)
The Privacy Policy lists processor categories rather than a live named inventory: cloud hosting (for example AWS), authentication (for example Cognito), AI and API providers, analytics and advertising measurement (for example Google and Microsoft), email delivery, and payment processors. Connected third-party services such as Microsoft 365 are governed by your agreement with those providers.
Retention
Personal data is kept as long as needed for the stated purposes, including legal and accounting requirements. Account data is generally kept for the life of the account and a reasonable period afterwards unless a longer period is required by law. Exact per-artifact deletion SLAs are not published as a single global number.
International transfers
Data may be processed in the United Kingdom, the European Economic Area, the United States and other countries where providers operate. Transfers outside the UK/EEA use safeguards described in the Privacy Policy, such as the UK IDTA/Addendum or standard contractual clauses.
What this page does not claim
OfficeMaker does not publish ISO, SOC, Cyber Essentials or similar certification marks on this page. Absence of a logo here means the claim is not being made, not that a private audit is implied. Enterprise access, entitlements and tenant isolation are product controls; they are not a penetration-test certificate.
Questions
- Where is OfficeMaker hosted?
- The production OfficeMaker website and APIs run on Amazon Web Services and are served over HTTPS. Authentication uses Amazon Cognito.
- Does OfficeMaker list subprocessors?
- The Privacy Policy describes processor categories including AWS hosting, Cognito authentication, AI providers, analytics and payment processors. A separately numbered public subprocessor register is not published on this page.